ac3a276cbb6c1b068435a2a706b467e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac3a276cbb6c1b068435a2a706b467e8_JaffaCakes118
Size

175KB
MD5

ac3a276cbb6c1b068435a2a706b467e8
SHA1

32afdc09e906859964f07b65b03ca3d48ce029fa
SHA256

a9bb0f75cdb5da5055c686c4d30aa3e307ca03001541c3b38148d70e298b4647
SHA512

3ff9ec3fa3b5b69e8f5f5c6316b3a0a6439c7483c4c27a31c35c10e86af5c449043bb4f71a6d872a01e0d0f967266551d71d01e280b2cf7afb17c42c4e235dc8
SSDEEP

3072:I1mrJcz5pD4ELz5JDl0FYJi38OKsKrmvmGHq4tN:wmtgFL9JDl0KJK839iYA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac3a276cbb6c1b068435a2a706b467e8_JaffaCakes118

Files

ac3a276cbb6c1b068435a2a706b467e8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Obnubilate\Temp\saot92do2ubo037rki8sf9st33\Stub.pdb

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ